Security Vulnerabilities, CVEs, Published In September 1999 CVSS score >= 9

Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.

WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.

Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.

The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.

Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.

Buffer overflow in AIX ftpd in the libc library.

Buffer overflow in FuseMAIL POP service via long USER and PASS commands.

Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.

Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.